[apparmor] [patch] profiles - adjust pusleaudio in abstraction

[Steve Beattie]

On Wed, Jan 09, 2013 at 03:04:27PM -0800, John Johansen wrote:
> On 01/09/2013 02:33 PM, Steve Beattie wrote:
> > I was testing out a profile for pulseaudio and hit an issue where my
> > pulseaudio process was getting the firefox profile applied to it. This
> > is because in abstractions/ubuntu-browsers.d/multimedia the rule for
> > pulseaudio is /usr/bin/pulseaudio ixr; attached is a patch to change it
> > to Pixr, so as to use a global pulseaudio policy if it exists.
> > 
> > Nominated for both trunk and 2.8.
> 
> Acked-by: John Johansen <john.johansen at canonical.com>

Thanks. If someone is looking for something to do, I think poking
around and finding other situations where we have ix only execs and
converting them to Pix so as to make easier additional developed
profiles would be useful (supporting that is the whole reason Pix
was added).

Note that there will be situations where it's not appropriate to make
that change (e.g. a shell invoked because of an embedded system(3)
call).

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130109/0f48f5e7/attachment.pgp>